Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80119768DA6111EFB6FF2E4C762E951A.roa
File: 80119768DA6111EFB6FF2E4C762E951A.roa (raw, json)
Hash identifier: Wek7F1VNJoHKCgUPGosjqF46HnoB4anX0ro7IRSdQXE=
Subject key identifier: 7F:FF:2B:71:F5:6C:28:B3:AD:FF:78:53:53:C3:4C:05:FE:7D:81:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014856
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80119768DA6111EFB6FF2E4C762E951A.roa
Signing time: Fri 24 Jan 2025 14:42:57 +0000
ROA not before: Fri 24 Jan 2025 14:42:53 +0000
ROA not after: Sat 01 Mar 2025 14:42:53 +0000
asID: 44559
IP address blocks: 154.203.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84054 (0x14856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:42:53 2025 GMT
Not After : Mar 1 14:42:53 2025 GMT
Subject: CN=6793a6f1-d1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:ec:c9:e0:22:51:c3:3a:a2:5c:55:ed:76:
35:92:9c:c0:9c:ca:43:e1:bb:20:0c:27:65:94:69:
16:ca:6a:3d:46:81:12:02:cb:5b:e8:3a:16:08:c2:
88:87:08:db:9e:cb:0b:87:5f:7c:72:19:f5:5a:9e:
b4:3b:4a:7a:e3:98:5d:8c:0d:8f:c4:99:41:61:d9:
37:b9:99:6f:2f:3c:f0:5f:51:e2:33:80:38:5d:63:
3c:35:aa:fc:78:39:54:19:8e:2d:54:0b:b9:11:4e:
cc:10:ef:ce:09:26:1c:d5:e0:95:a4:c5:fa:83:0f:
00:e7:9d:49:1f:62:9d:2e:bd:7b:12:4c:54:7d:2f:
e1:19:e0:c9:32:c3:39:08:d5:0f:0d:96:1e:ed:3a:
22:07:0a:bd:e7:c2:18:62:04:fc:39:c0:7f:83:45:
31:33:67:83:19:8b:3b:7d:02:14:93:e9:c1:8a:ae:
79:30:19:4c:d1:5b:c4:b4:87:9d:45:e2:da:6f:68:
8a:0b:cb:98:cc:f5:9d:56:80:48:68:59:d6:f5:45:
3e:a6:cc:fa:18:24:5b:6e:58:65:ee:17:37:f0:f6:
71:de:ab:7e:c0:f7:a0:fd:3c:24:75:14:c6:c7:9e:
28:d2:f3:27:1c:73:62:c0:96:1c:13:4b:48:03:53:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FF:2B:71:F5:6C:28:B3:AD:FF:78:53:53:C3:4C:05:FE:7D:81:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80119768DA6111EFB6FF2E4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.230.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b4:1c:f5:e5:c7:be:5b:f9:35:4b:20:fa:6d:73:92:d7:df:
ff:90:bb:dc:17:84:1b:3e:dd:31:d6:47:9a:60:1f:26:82:03:
23:ec:59:ae:f0:bd:64:06:32:8f:6e:d8:0a:3b:44:8a:bf:ef:
e9:b2:89:00:4c:bf:3b:79:7e:7a:96:f4:d8:ee:1e:c6:3c:85:
f1:8f:d5:d1:3f:07:c6:5d:c4:b2:f0:7a:c5:7c:f1:a7:2a:f4:
38:1f:b6:9c:02:23:de:cd:b3:60:13:99:b0:f3:0d:bc:d6:e5:
fd:4d:62:88:34:23:4e:04:5b:09:ae:68:45:a4:34:ad:3a:6f:
eb:14:56:c6:b4:3f:55:63:23:52:52:5c:31:fa:ee:59:39:23:
af:0f:af:be:86:c0:11:9a:80:2a:42:f7:1f:ab:16:f3:b0:5e:
9a:85:02:03:e4:e4:1f:fb:70:f8:a5:b9:fd:89:94:54:ef:64:
7b:02:7d:c8:35:77:12:53:a7:20:5e:e1:b8:c9:24:64:5c:4d:
36:6a:91:82:e3:a0:47:af:b6:5e:c7:66:3c:60:cf:f4:ab:02:
4b:41:00:c3:17:01:df:3e:55:7a:63:4c:b4:5e:86:08:a4:21:
66:cd:34:ed:dd:d6:f8:f3:80:58:9f:16:77:ee:fa:b6:3f:d6:
65:8e:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:53 2025 by rpki-client